This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json) Hash identifier: dEiqf8yiKS0ofovzxTPYyVfqS5V1Zz3POOG3aO55M+c= Subject key identifier: E0:DA:4E:22:C0:FE:CC:E6:B5:80:EE:88:99:FC:FA:AF:B1:C4:ED:FB Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft Manifest number: 066B Signing time: Mon 22 Dec 2025 21:46:28 +0000 Manifest this update: Mon 22 Dec 2025 21:46:28 +0000 Manifest next update: Mon 29 Dec 2025 21:46:28 +0000 Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: C1HLmhSN3O6EN513xcGiWW+QqJbwilPVZjBHP9OZKbU=) 2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: OhXdNxeZYZKsEh/kQY88PZgh8U46VN9OPBnD0qrSgNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Validity Not Before: Dec 22 21:46:28 2025 GMT Not After : Dec 29 21:46:28 2025 GMT Subject: CN=6949bc34-face Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:ce:56:c9:53:b5:c2:9c:20:bf:b1:9e:7e: aa:a3:98:4a:ac:35:f9:c2:62:74:86:ca:90:26:27: 61:f3:7b:7e:ac:ca:40:84:08:0d:6d:80:69:68:5e: 56:53:4c:1a:f5:03:71:ba:54:ad:a2:1c:04:4f:ac: 78:b6:8d:6d:c5:cc:b7:99:9a:23:b3:f3:b3:1b:57: b5:01:82:a7:77:ac:b5:d3:8c:47:15:5f:26:c1:c5: 52:28:17:83:ef:55:5b:64:d9:2e:49:06:a8:7f:d7: 70:de:33:3d:d0:55:5b:94:a4:61:71:99:0d:9a:01: 06:b6:ab:10:56:f0:da:bf:16:61:8e:0e:73:0d:21: 52:3e:97:ba:76:cc:d1:c8:b6:f2:02:69:51:c6:28: e9:56:1d:c0:b9:8e:4f:8f:86:f8:23:14:b9:29:8b: b1:dc:ba:28:35:b3:dc:9f:44:f3:4f:83:a9:1f:b9: 05:dc:c5:95:f0:f8:95:2f:43:a8:b6:53:77:34:f1: 34:01:05:56:3a:68:cb:f6:ad:e3:32:40:37:cf:d9: 26:3f:f7:e6:b8:ef:c0:9e:48:fd:02:33:2e:25:c4: 06:25:5b:39:16:0c:2b:50:24:1f:a2:36:3b:57:ad: ef:a3:ca:41:56:a6:35:bf:4b:34:4b:42:38:d7:1f: 91:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DA:4E:22:C0:FE:CC:E6:B5:80:EE:88:99:FC:FA:AF:B1:C4:ED:FB X509v3 Authority Key Identifier: keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:c0:cc:97:19:bb:05:d4:d1:c6:2a:72:26:07:4a:35:30:7f: 82:fc:4d:d3:24:55:e9:e6:85:13:c4:f2:b6:12:18:61:7d:23: 95:52:ee:1f:5e:e9:05:86:75:ca:22:c7:7d:90:1b:d2:7e:e6: 1e:72:c3:30:3f:a4:76:9a:e6:e8:2c:d1:ec:00:a8:d8:33:15: f7:46:39:9b:e3:8d:7f:1b:94:23:ee:d7:99:3d:17:36:16:18: cc:34:d9:99:71:04:4f:51:d7:18:eb:f8:25:70:91:1f:3d:0d: 9e:0f:35:2a:43:68:6a:9f:cc:4e:c1:0f:78:94:ec:52:1b:35: 3b:79:83:74:d3:ad:ef:08:25:8c:3d:55:0b:d5:29:71:51:05: c8:94:bf:64:ff:c8:a0:d4:0c:e7:ec:88:ed:01:f3:e2:cb:0c: 0e:a9:0d:73:87:fb:c5:0a:39:ec:6f:c3:1f:40:41:dd:2c:70: 4f:24:64:6b:74:71:e6:ad:be:72:28:0b:c1:f4:ec:00:c4:83: bc:c8:9d:6e:bc:62:04:35:91:de:e1:06:ae:9f:e7:94:e6:b2: 7a:92:a2:a6:72:f1:f8:8d:2d:a0:1c:a8:01:ec:a9:78:e6:ea: ec:08:fe:a9:df:eb:21:ab:a3:34:7a:f2:3e:b3:d2:eb:06:0a: 31:0c:76:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBRjkxMTAvBgNVBAUTKDdFRTNCODhGQjFBRjBEOTJEQkQyMTY2MTI1RkIwOUNC MjRGMTA4M0YwHhcNMjUxMjIyMjE0NjI4WhcNMjUxMjI5MjE0NjI4WjAYMRYwFAYD VQQDDA02OTQ5YmMzNC1mYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ7OVslTtcKcIL+xnn6qo5hKrDX5wmJ0hsqQJidh83t+rMpAhAgNbYBpaF5W U0wa9QNxulStohwET6x4to1txcy3mZojs/OzG1e1AYKnd6y104xHFV8mwcVSKBeD 71VbZNkuSQaof9dw3jM90FVblKRhcZkNmgEGtqsQVvDavxZhjg5zDSFSPpe6dszR yLbyAmlRxijpVh3AuY5Pj4b4IxS5KYux3LooNbPcn0TzT4OpH7kF3MWV8PiVL0Oo tlN3NPE0AQVWOmjL9q3jMkA3z9kmP/fmuO/Ankj9AjMuJcQGJVs5FgwrUCQfojY7 V63vo8pBVqY1v0s0S0I41x+RxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODaTiLA /szmtYDuiJn8+q+xxO37MB8GA1UdIwQYMBaAFH7juI+xrw2S29IWYSX7Ccsk8Qg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFGOS8yOUNEQ0Q4RUE3 RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRaTGIwaFpoSmZzSnl5VHhD RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1TzRqN0d2RFpMYjBoWmhKZnNKeXlUeENEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFGOS8yOUNEQ0Q4RUE3RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRa TGIwaFpoSmZzSnl5VHhDRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpwMyXGbsF1NHGKnImB0o1MH+C/E3TJFXp5oUTxPK2EhhhfSOVUu4f XukFhnXKIsd9kBvSfuYecsMwP6R2muboLNHsAKjYMxX3Rjmb441/G5Qj7teZPRc2 FhjMNNmZcQRPUdcY6/glcJEfPQ2eDzUqQ2hqn8xOwQ94lOxSGzU7eYN0063vCCWM PVUL1SlxUQXIlL9k/8ig1Azn7IjtAfPiywwOqQ1zh/vFCjnsb8MfQEHdLHBPJGRr dHHmrb5yKAvB9OwAxIO8yJ1uvGIENZHe4Qaun+eU5rJ6kqKmcvH4jS2gHKgB7Kl4 5ursCP6p3+shq6M0evI+s9LrBgoxDHYU -----END CERTIFICATE-----Generated at Mon Dec 22 23:50:51 2025 by rpki-client